GCVE - cpe:2.3:o:dlink:dir-615_firmware:20.07:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-615_firmware:20.07:*:*:*:*:*:*:*

part: o version: 20.07 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 615 Firmware (`e8e43bf8-b123-5717-aab5-ecb4f46b751e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-19742`	vulnerable	2026-06-08 05:13:23.516009	Details available On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field. Published: 2019-12-18T12:19:49.000Z Updated: 2024-08-05T02:25:12.653Z Open on db.gcve.eu Reference links https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf https://www.dlink.com/en/security-bulletin https://infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-router.html https://www.exploit-db.com/exploits/47776 https://pastebin.com/edit/MZV6DNg7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17353`	vulnerable	2026-06-08 05:13:10.309994	Details available An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page. Published: 2019-10-09T11:55:38.000Z Updated: 2024-08-05T01:40:15.254Z Open on db.gcve.eu Reference links https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15875`	vulnerable	2026-06-08 05:11:03.717591	Details available Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request. Published: 2018-08-25T19:00:00.000Z Updated: 2024-08-05T10:10:04.593Z Open on db.gcve.eu Reference links https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_UPnP/dlink_dir615_xss_upnp.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15874`	vulnerable	2026-06-08 05:11:03.716307	Details available Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request. Published: 2018-08-25T19:00:00.000Z Updated: 2024-08-05T10:10:04.895Z Open on db.gcve.eu Reference links https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_DHCP/dlink_dir615_xss_dhcp.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.